Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious ...
kentico Vulnerability Advisory Catalog
Total 53 security vulnerabilities recorded for kentico software and firmware.
CVE-2018-7205
MEDIUM
Component: xperience
📅 2018-02-20
CVSS 4.8
Dossier →
CVE-2018-7046
HIGH
Component: xperience
Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a d...
📅 2018-02-20
CVSS 7.2
Dossier →
CVE-2018-5282
HIGH
Component: xperience
Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML docu...
📅 2018-01-08
CVSS 7.8
Dossier →
CVE-2015-7823
UNKNOWN
Component: kentico_cms
Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web s...
📅 2015-10-21
CVSS 5.8
Dossier →
CVE-2015-7822
UNKNOWN
Component: kentico_cms
Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) paramet...
📅 2015-10-21
CVSS 5.0
Dossier →
Page 3 of 3 (53 Total Records)